Default Apache install... safe for tinterweb?
Default Apache install... safe for tinterweb?
Author
Discussion

aldi

Original Poster:

9,292 posts

267 months

Thursday 25th May 2006
quotequote all
Just as it says on the tin, default apache 1.3.33 install with mod-perl and fastCGI... is opening it up to the outside world a silly thing to do or not? It's going to be running this. Was thinking about putting a .htpasswd infront of the RT login... then again logging in twice all the time is a bit of a faff so I'd rather not really

JamieBeeston

9,294 posts

295 months

Thursday 25th May 2006
quotequote all
Latest version = safe enough for the world

if somoene wants in, they will ALWAYS find a way.. but for the average user, latest version = safe enough.

J

tvrforever

3,196 posts

295 months

Friday 26th May 2006
quotequote all
you should use version 2.2.2 rather than any earlier ones...

aldi

Original Poster:

9,292 posts

267 months

Friday 26th May 2006
quotequote all
tvrforever said:
you should use version 2.2.2 rather than any earlier ones...


Porquoi?

J said:
Latest version = safe enough for the world

if somoene wants in, they will ALWAYS find a way.. but for the average user, latest version = safe enough.

J


Cheers... I don't mind if an elite team of CIA hackers takes 6 months to get in, I do mind if a script-kiddie 'pwns' it within 30 seconds of going live

>> Edited by aldi on Friday 26th May 09:30

TheExcession

11,669 posts

280 months

Friday 26th May 2006
quotequote all
Been a while sonce I last installed a live apache server, but one thingI rember is that it used to allow directoy style browsing by default.

You might want to double check, or it may not bother you if it does.

cheers
Ex

tvrforever

3,196 posts

295 months

Sunday 28th May 2006
quotequote all
tvrforever said:
you should use version 2.2.2 rather than any earlier ones...


Simply that v2.2.2 of Apache is the latest 'stable' build http://httpd.apache.org/ - it's the one I use

JamieBeeston

9,294 posts

295 months

Sunday 28th May 2006
quotequote all
tvrforever said:
tvrforever said:
you should use version 2.2.2 rather than any earlier ones...


Simply that v2.2.2 of Apache is the latest 'stable' build http://httpd.apache.org/ - it's the one I use


It's the latest in the 2.x Branch, but the 1.3.x branch is perfectly fine, and much more widely adopted still.

J

aldi

Original Poster:

9,292 posts

267 months

Sunday 28th May 2006
quotequote all
Cool,

It's been on for 48 hours now, I stuck it on a non-standard port, with the app's login page in a subdirectory, with browsing turned off... It's still there so far Thanks for the advice!